role not recognized by user object for authorization

I've been following the MSN tutorial on authentication and authorization using the sql membership and roles approach on a specific web site in development. Everything works through allowing specific users and adding/deleting users, roles and users in roles until I get to the Role-based Authorization tutorial (http://www.asp.net/security/tutorials/role-based-authorization-vb).
An authenticated user with role of Admin is denied access despite using <allow roles="Admin"/> followed by <deny users="*"/>. Also, <allow users="0000001"/> (that's the authenticated Admin user) works fine whether I add it to the folder's or a specific location's rules. It seems as though the user is authenticated as reflected in a login control. The rules for the folder recognized the authorization. The management pages recognize the user in the Admin role using the UserInRoles method. ...